{"id":"W4309529433","doi":"10.1145/3571848","title":"On the Discoverability of npm Vulnerabilities in Node.js Projects","year":2022,"lang":"en","type":"article","venue":"ACM Transactions on Software Engineering and Methodology","topic":"Software Engineering Research","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":true,"ca_institutions":"Queen's University; Concordia University","funders":"","keywords":"Discoverability; Computer science; Dependency (UML); Vulnerability (computing); Computer security; World Wide Web; Software engineering","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002304573,0.0001653259,0.0002710767,0.0003485767,0.0001598911,0.00002068579,0.0007714974,0.00005889951,0.00003786997],"category_scores_gemma":[0.006331637,0.0001379572,0.00007477274,0.0006560694,0.00007159529,0.0001013994,0.00008410603,0.0008063027,0.00000119857],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001157966,"about_ca_system_score_gemma":0.00007454517,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00009655362,"about_ca_topic_score_gemma":0.000005325209,"domain_scores_codex":[0.9981045,0.0006230692,0.0002522839,0.0004102013,0.0002921788,0.0003178008],"domain_scores_gemma":[0.9780881,0.02083979,0.00003407479,0.0009532346,0.00003293075,0.00005183381],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"observational","study_design_scores_codex":[0.00008540149,0.000255179,0.002918536,0.0001401135,0.00005947598,0.00001327381,0.004223341,0.9543895,0.0006490556,0.009985748,0.00004042682,0.02723996],"study_design_scores_gemma":[0.0107586,0.01440595,0.3740734,0.0008106324,0.0001831097,0.001028355,0.006122495,0.3308532,0.1551158,0.09046359,0.01003167,0.006153168],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2964491,0.00007230217,0.7023129,0.0004578131,0.0003458983,0.0001883029,0.00001297565,0.0001578602,0.000002826102],"genre_scores_gemma":[0.8080049,0.0000130578,0.191545,0.00007679084,0.000009589653,0.0002859936,9.236641e-7,0.00001659354,0.00004713794],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.6235363,"threshold_uncertainty_score":0.7580019,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0900358588716811,"score_gpt":0.3147622559724983,"score_spread":0.2247263971008172,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}